F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Aug 26, 2022
Solved

F5 Advanced WAF/ASM and Shape intergration is the AWAF Bot defense profile still needed?

Hello,   As now there are more and more users that use F5 AWAF/ASM and shape together as Shape uses advanced DeviceID+ as described here in this post https://community.f5.com/t5/technical-forum/w...
application delivery
security
  • AubreyKingF5's avatar
    AubreyKingF5
    Oct 06, 2022

    Double-checked. Also, to clarify, definitely not a mirror. Load balanced proxies is probably the best way.

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Oct 05, 2022

Thanks for the great information. Can I ask just one more thing? The F5 Big-IP and Shape integration can also handle API traffic where javascript can't be inserted by mirroring the traffic from the BIG-IP to the Shape servers right? Similar to the Bot Protection Profile "Challenge-Free Verification" that can be used for API traffic without the injection of a javascript if I am not wrong.

AubreyKingF5's avatar
AubreyKingF5
Icon for Moderator rankModerator
Oct 05, 2022

I believe so, yes. I'm double-checking to be sure.

 

And yes. Shape can be load balanced for on-prem / high performance type situations.

  • AubreyKingF5's avatar
    AubreyKingF5
    Icon for Moderator rankModerator
    Oct 06, 2022

    Double-checked. Also, to clarify, definitely not a mirror. Load balanced proxies is probably the best way.